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ismm i] 7F lyxi^mm^^m i -y f <7-y 

k*2a>*v F7-y ktfTWxmm&ZitLXm 
MtZtlK * »/ F 7 yXfAJWt S*7b7-? 

WE*U JS20*<y FV-yJi. ^-ftty-KSt/' 
faro F n "o^ v- i £ fl" U 

^motfrlfi^Jiro ha^rodfyii y- h*^ 

jnTFFX, iMftftTF'FX, rnb3;i,f-^--y 
h£x-yfc-t£> <¥Sy°n F n/prndf ^tt'— y & -f & 

F n^rndf ^^iS^ix-C ^ Jt^ra F a)V?X2* 
yf^^Ctthl>7o F rj/Ff*— y^x— "/ F fttfOT F* 
^flWB^SBM-iTFPXSfflMWtt^S^v F7 

[«*^2] MtB^lToFn/Frn^v-te, y-F#> 
£>&£»MT S HVm-TU F -y F IZ&ttl&M 

mftr f v-xtmmyn f ^uvyu^arr f fx t Sr 

WWL*:TFPX5t3gffi#8£*U fulB«JiynF 

m\mr f fx t friar v^ x&mimfr z>mm9G<&g 

«rn F =J/F7t3df y-cOT F FX£&SlT-|>li3l<lI 1 IB 
[ff*Jf3] ffiB^lX(±^2^'7F 1 7-^^^< 

t i>— :fro*-y F v— ycoMB'gaTn Na^ru^fy 

*>w-r?»TFux^ffiig{i, tirieTFPxggm^HT 

S^ft&vvr F FXh^fira F n/Fyn^f yW7 F 
FX t WM(tt£i§titV M.|f^ll 1 ffi«co* >y 
FV-yWUF-XxA* 

C«*IR4 ] lulBWaTo F 3/F<y}7"n3- Fii, r F F 

^mmm^m Ltzr f f x»f-;f£a- t , me 

TYVxmkW&, ffieTF'FXg3&/F- JVt^&lCQft 

m.tts:^m^f=Jx.9 F^ASN.i^a^ttci 0. *smr 
nb3/Kornha;Pf-^a-i/ F£#*;ft.ST FF 
xffi#g££W£it*^2fB«<0*-y F 7-y<gaFX 
fA. 

[«*if 5 ] r f ^tts#«***R«9* v f v-y 

#7 F FX^gfiTfgllSfl*:* -y F 7-?y^fA 
£<gJI-f &*-y F^-y^Mi'Xx.AT'iSWT. 
WWltf)*? F V—9 C«BBtSftft*»<oy- FW 
JMftco*«:rn F a/Fro* ;y fc ^ t , 
^ix^"ft«DfglB<i : Jiy''o F 3;F7°n=Jf v-fi. y-F'*»£> 

7CTFFX, JMfi5fcTFFX. 7°n F^Ff'-y^--^ 
FF*qc7)f'-y ?rtli7°n F awm* y fc-f-S. 

F r^FTo* £>*VC # fcWo F n;W7n 

^Fx-y^til&T'n F rJ/Fr-y^-— v F [*F97 
F UAflWSfcSEHM-S T F*FX3g«|g|Si S^TS * >y F 



V-^HyXfA„ 

[HN8S6] y-F*^iH^T#^^-y 

y— yfrt>Mt>tix%fc'gmyri hww*ir-y vizis 
&tihmmjtTYvx^ Mf5trFFx, tof^fx 

— yj.^.-/ Fl^cOx— y 5rWSy°n hn/ycOTo^r^x 
-ytL, fljJcO*arcrF3;Fy°ndfiy*^jH^tLT# 
fc^Ta F n/Fcor u^f Ft— y te**tL* 7°n h a 

/Fr-yjx- > y b i^jctjt f Fxffi#g£^grr sfiro 

Cft^3S7] y-F*^M^tlT#^«IiroF3;ytf0 

;n"7- ••/ F s ^iLTiMfrrs^arn f ajvcmmtfiu 
* S n ^ e * - ^ "5 ^Ttg&f BISSSttT'fc o 

y-F*^5H^ixT#Jt«fflrn F3;F<0^°y- y F(C^ 
4*i62Se7cTHly^. Mft5feTFFX s 7nh3;kf 
M^jcOt— ySr'Say'n hn;Fc07"ndf i^-f' 

-ytt. ft«^aroF3;y«y°odfv*^ji^tiT 
f itfira F 3;y<73rodf v-r-y ^ t ti^. y°o b 
n/Fr-y -y h i^i^t f vxmmz'smt&tmv 
imztitz n i-y d ^m^w&mw. 

Ctt*iR8] y-F^A.iM'b^T^^^irohrjyycT) 
-y F £ MULTMfrt&tfJirn F n^cO^aSrS 

y-FA^j*^ixT^3t«fflra h3;W\77 
^tL^jSftjcTFFX. MftftTFFy.. 7nh3;l,f 
-^-■y M*i«f- y £^iy°n h 3;K7)y°nJf y-T 

a;Fx-y^--'y M*I»7 FFy.ffi|B$r^-ti.roy 
[0 00 1] 

[ 3£W<0m-f h Sffi^if ] *%HJ« , * -y h ^ _ ? ^ 

iCCO^-y h >7-y*^^$^^-y h V—7 y-X^ASr 

^- >y F V-^flyXfACitl. . 
[0002] 

[ft*«S»] 4y*-*v F^i;-cets<fij 

ffl^^xT^S^-y hV-yr FFXT&SIPTFFX 
{±, IPv4 (Internet Protocol ver.4) tDf HfL-^ya 
F3MCJ: 0«^^il-l.i>«T". 32b" >y F^TFFXS 
S^rKyXt*^. *-y hv-yrFFxts, ^ 

>y FV-y C»ig$iX.g>«ll^-«tCflJ0 ^.^TV^ 

h V-y T F FX fcr-ov ^TtiNIC t D?(f ttSSM^ t' 
=fc ^-t^SiatfJ^T^^T^it. IPv4"? 
5i , 3 2 t"-y hCDTV FX^^^^TatfeWtCtift 
y^-C-2 <7) 3 2*ffl-t^r^^40^ t <7)T F l^X "5 ST 
Sit L^L^r*^, ^^*7M« 
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-thmmmn^z t , 4 >y f &mr&-£x 
<r>nmz\?vAcn\?T y vx &f ij 0 * z t 

[0003] zeommzmm-t&tzibntimb lx&< 

fefoixX^&critf, IETFC0^J6I.RFC1631 (The IP Netw 
ork Address Translator) ^Zl^WL^flX^hTYUX^. 
WMtb, RFC1918(Address Allocation for Private 1 
nternets) liZHMZiXZ V F * v F V-y 

f^^y j.r7_ y&ir^n— #/l^*y Yy—TMz&tiE 

* >y f v- y \zmmth t imt>%^ t ^ o z t & mm 

kLX^i. S-fimm^y YV-9ts:b<n 

O^W*7h7-?ii, BFC1918KSE«S*lfcr5 

<— f t f \/xcr>$m<7)T yux zmm LX \?TYV 
xzmio^xx^-vYv—pitmmth, zcob%, z 

coy-yjK-YTYUXXU, A Yftt'coft 

m-'v yv -9 ammistc^&o 

•yhi t'coftm- vYv-? izmwtt&mmiz^ ^x 

it, n-#;UD*>y F7-y bA Ytcb'coft 
7h7-?t <r>mz, RFC1613ti21KS<rJtT F U 
x^&SB^ffiB t , T HU^sanic J: OSSWI''**- t 
YnTYVX^TH^-YTYVXfrt*, 
"/Y[ZT9-^X-t^tz^><r>-7'u—/<.)VTY^X^.b^m 

-r&zbtzx-ix, mm*->>jmb~t&„ zzx^u-fi 

)UTYUX biMK^ b'izX'OWlD^X^ti^TYY'X 

-chi, zcr,b%, m-x.)VT y ux zmmzm o % 

TT , a»«n-*^y — FaWRRWC 1 •ooyo-A 

o-m'/KT* F U-X tr^tSSfcvSffl-tS J: 5 ^X**>Tf 

[0 0 04] bZhX\ RFC1631tc:fcV^TIB3K3il-i.T 
FW*.^lfc:i>V*Tt±, IP^^>y h^v^i^li, 
MfiTCtjMftJtOIPTFUX^SS^^i;, **U:#o 
T£ t & IP-N ••/ -y 9 y-J±CO££*mtM. L "CI 

S SU & . .1 ftic i: o TTCP/IPK J: §a«*f»rigt £• 

[0005] L#>L=$r#<£>, Mx.{fSNMP^i:«*-y hV 

X J $>V)b r )Ztl&7vY=Ul-7 £ -?3-—vY (PDU) ff 
1> I PT F U X#*-t- £ fit V> S , Z cOgfcfr{iRFC1631 

t,zMmzti&TYux3mimmz^^xi,i, tyux^ 

[0006] - if, iif 1 1-18705 8-^fifc: 
ti s RFQ63HzfB»^iX-S. T F l^X^c7)»igtjDi 

xiiTY vx?mz-r& £o%ty uxgmmmmm 

ZtlX^Z. 
[0007] 

i&wwmmLZdb-t&mmi tfv 



X^J&gBfc: J: oTT^-f^-FTFL-^i: y*n-A;U 

7H^t: ^sara^Ta b, mwm.m<o*v yv- 

9 X'&mX' # h 7u—rt)VT YUX^m^ *fl/n F 
zi)V<r)Wmi<z£'oX'K±>tihZb<,ztt:h . i^ft, » 

ffiantft -5 t rxx->WT Yvx^m^xhitx^ 
h YizttLxtai vt\ si7n f aMzx &mm 

W-Ffc-PV^T tWSS-tf d - btfX-ZtUZ . i 0* 

a^was-fl 3 z b ififsmttct . 1 1 - 1 8 7 

[0 0 0 8] *^Hj}c7)gW(i, £s5:STFW;*#y&9* 
■y F »7- 7 tfT F ^X^m^StC J: 9 ilfc * >y F 
7-?isXr-Mz&^X. <iVT YUX Zftttc 

v > y- HBB"Cfc«arn f n^fc ±if-^ a^l* i: if i 

S*>y F!7-^^i>-X7"AS-li«f &Zbt,Zfo&. 
[0009] 

KttT, Tvisxftmm%&mie>*v Yv-?b 

I2©^7 FT7-^fcj5«rF^ga^lB*^LT«§^ 
?W^-y YV-t> isXT-^tgrnth*"; YV-9^ 
lyXfAT'STC, His ^2<0^7 YV~9li, * 
ix^i\J~Ymf l ^m-ruY^iVy'u^l r 'b 5r*L. -?■ 
ixm^iITnF3;Prodf^{±, y-F^^JH^it 
T s? fcfiro h vuv<nn*r -y h ^tcT F 

iMfi5ferFUX s 7°nFa;k7-'-^^->y FSr-r 
- ^ t -T S F 3 ndf v-x-^t -T 5 fsr 

o F n/i^rn^f >-r — ^^fiSUS t s -ffficTj'ffarD h dv 
yu^^hmhfiX * /S«il7 0 a F 
^tC*titSrQF3;I^T f -^i--y FPMCOTFP-X'hf 

fB^m^rsT f ux^mmb z^-tz . 

[ooio] c^itcJ; 0 , ^iro f 
T'r-^Mfl^TT 5 3 t ^fi? s yu—J<)VT Y vx z 
fcffc&t ^ y - F BTCf - 9m%*'ftoZb itx-% h . 

[00 11] 

[0012] ^x^-Mt. ya-ysv^-.y FV-y 1 
0. TJA F*y FV-yA3 0 a N T^^f^-F 
*-y FV-yB30b b^LXH'O. 77-f^-h* 
-y F 1 ?— y A3 0 a^y'D— y^*-y FV— y 1 0 b 
7Pl'X^ff5NAT2 0a, 7°5 -f / <— F * -y F 
V-^B3 0bi/n-A"M7 FV-y 1 0hSr7*F 

l^X^^tr^ NAT 2 ohizx-ixmrnix^^. 

[00 13] y^-f^-F^-y FV-yA30atC{J, 
mM£ftdtzi>bC0S-Y8 0&mMZtvX^&. zcoy 

-F8 0J4. sascflEsatEffl-i-sjtA^asffais 
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[0 0 14] 77^-f^7h7-;B30b 
fctt. WMgFC&£ y- b 5 0 . 9 0, firn b 

[0 0 15] £<OJ:3£fliJ£fct5V*T. **7>7-? 
[0 0 16] T^^^-b^-ybV-^ASOaCOy^ 

k 8 o ^^i^a4 o izx xmmmmTh & y - y 

b co^aTn b r? ^rn^r S/^—A 6 0 b fc <Z)ffflT r— 

7ot mwm^mtsam^jm ttz <r t tmrnz* 

So 

[0 0 17] ZO&liZ-ttlte. 7°7^^b^7b7 
-?A30atffiffl3<lS7H^i:, T^^-b* 
y b7-?B 3 0 bt*6ffl8tlS7Kl/Xttfa=if 4* 

b*7-?A3 0 a fc % T^^-b^-y bV-?B 3 0 
bfccora^r^>f ^-b*v b7-;<7)7Kl/X^ ^ 
owC/M^y b7— ^TFUXtaBftSii^V^r^ 

[0 0 18] i DIftM 1 CSLJt^v h7-^y 
^--ys:<7)^l7 0 n b n/i/rn^ v<t— ^ co^iry b £^ 

o. «agw»cft*y-H5o. y-H9 03&»^ssB 

?<xl>f irn h 3/1/ s N M p<7)a°7- 7 h*^ffi/n 
b^7D^6 0a s fS7nba/l/7n^yfw\' 
6 0b(± s *y bV-^JTT&S I Pmey^vytprtM 

Sr. 77 y 3 yi^f-^M^ Sfirn b n 

/^cr^r^— fWilrv h^b7>X^- bJBk LT 

rnb^/l^rn^y'f^ ^e*<£>3Mfft5fc. jMftTcfi:. « 
gro b ^^rndri/Xlifirn b n^rn^yf- 

[0019] ;;t, ias$£S4 o*»fc*ae«iSirc& 



sy-K5 ox(±y— H9 o'v 4fc-t^R*r^aisffl 

SIB?* 5 y - b* 5 0 x«i y - b 9 o frt>m}MW 4 0 
^t. fi7nh3;P7n^y6 0a, ^ITubr?.^ 
7n^yt-A'6 0 b Sr^LTilfl^^tLl) k^cof 
-f<omtLlz^XStW*&. «BBT*ty-F4 
0 #58S Lfc^rn b nwf-^i^/n b 

>-6 0a«2 s f!7nba;l/i?)f- f^cobcok, ^1 
rnbn;^^^^*coMfS5fes iMffTnS-ffi^^ 
tlT n N n/y/n^ryf^ ^ ^ M L , fI7n 

6 Ob^ff^S. farPb^/yTP^ytWN'eO 

7P b aw?— 9 k , ^comm^tk SrKDffiLT. 
firp b n/i-w^ ^ b £S«*U 

*4«BaBsarc*-6y-H5o^im-So ci^t 
§ . mmru v ww»*tr ? hcommjt^mmyu b r? 

^7P^yfws v 6 0b}: LT&<£i:T\ 
^^<50J5^*^M7°0 b 3/l/7o^yf-A'6 0 b 
ftStlSo y-b5 0*^^Warnb3;^Jl?i:^ 0 ^ 
•y h Lfc^rn b 3/y7n^r -a' 6 0 b 
{±, f b & ta7°o^ y7n b n;Pf-^ 

£33* L . M7n b nyKT 5, 6 0 a fcjS 0 »f . 
fi7Pb3/l/7D^y6 0 ai4. ^ITn b a^7n 
^yf-?A^fl7nh3/«;^7 b^S«^ 
U W»M4 0fcjBi\ 

[0 02 0] JjLhcoiofcLT. y-FIBtTOttrnb 

n b 3;b7 0 o^r^. f!7n b n/l^n^1?w*S::fr 
S Z k TWiro b =r;MC <£ & iWtfcfr 3 £ £ #"CS 

[002 1 ] Jgfc. «i7nb3;U7n*y, f!7n 
bn/^n^yt-^ll flrarnbn^PDUgf^ 

^ti^i 0 s y^b^fl/o b n/uorn b n^x- 
^^-.yb (ot. rp D uj km-* ) ^tc^ins 

y-K^Tbl/X2r. *7b7-^flffl^E«W?i:7 

w*r b i/x «fc 3 r fc s^-c* s * 

by-^WSfcfcV^TcO^ffiffl^ixSiS 

[0022]^il -C*Lfc»«fc:*5^T(4. M7 
ob3/l/7°n^y6 0 a *7P^5 AtHSfl.^: 
oV^RBBLfctf, farnb3^rn^^A'6 0 

IBtfU flTP b 3^7n^ryt^^It^iit 
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[00 23] ifcfc. Hl^LfcNATfcoV^TffiBJ'f- 
S„ IlCSUNATfiRFC 163 llzmMLtzh 

coxfo&. at '<rm&*Wffl-t&tztbemZ'fo 
h« ztnmiz^X y*o-A/F*y F7-y l o 
krjJ^-ht-v 3 0^NAT2 0Sr^-LT 

mm^ilX\^^-y F^-ytcfcVrC, y-F4 0fiy" 
ow*7 F l^X 2 0 0 i; G 0 jWWSf £>*U »1£ 
ffiSiaiir 7 -4 ^-h7h'^210tULl«\ y 
o-yS'/FT Fl/XtUGl tfM K) L>tiX\i%> 
fco^TIPJi-f & . zcoms. •e^y'n-ysvFTFF'X 
b. W^JC^(tfcSil2 3 0 2r 

N AT 2 o tcistt „ -ifttcfco. y-H4 0H*»4,y 

- F 5 0 mizT F FXG 1 IzMLX^lr -y F Sr^ffT 

§ „ N AT 2 0 JiT HkXG 1 'M&Iftfc^.y F 

*2 3 0^-5TjSfi3ferK^*G1^4,Ll^st^ 

H5coj: -5 cry— F4 01HNAT2 o^ij* 
Ute^vbt UTli. *>y hV-^JitfflS-TS I P 
JKBfl-O^v^tiHRi: LriMffftiiG 1 fcV>3«***A 
■jTV^^v Frtf-sJfcfcO**, NAT2 0K75-f 
F * <y F V- y Mcoy- F IzmifX tmzti& b £ 

fttiL l fcv^tffg^A-^y^-y Fh^TiUflSft 

Ofrhf'a—rtjV*-"/ F*7— yffllcoy— F4 O^ttT 
r**-v h*mm?&1fr&te. y-H50MNAT20 
^iLtA^ 7 F t LTtt I PJM^V^.y^fffgfc 

LTMfl7C«iL 1 fcV^flWH**A-?TVxfc^«y Frtf-j 
fzi><0i>K NAT2 0A^7'n-A';^7 FV-^WcO 
y-F4 0(C|tWr+8S*l4i:*fcli» IPJfffl#<D 
^•yy"fl??8£ LT^fi7C«G 1 fc^dflWfcWA-sfc^*- 

[0024] ZCD AT 2 Qcr>m%lz£<0^ J— 

F 5 0 B#<75*>y F"7-y<7)l&5£i LTfiT7-f<.-F 
TF'V*Ll£#ofc<afcLT«bg^4;WrJ:<, y 
-h*5 0t77^<-N*7 F^-^rtfiOflfcW^at** 
»»t 7 4 <— F T F \sX L 1 Srffiffl LT 

mxmm^nom^zit. NAT2oi,z£ixm Y )%x 

it^D-yNVWr F IsXG 1 £&fflLTjIftr& a . 
[0 0 2 5] ritttNATttl PJfCOTFFy^ 

ift&fH (^aroFn^PDUgp 
Jzd&NATfcflJJHLfc^-y ^KJSWC, BEKSi 
fi7n F a/F?) P D UMftcOT F FX £^&-f S 
[0026] JUT, ct 9:BttW3r*>y F V-y yXfA 



cOTVUXbLXmmLX^m-t&im&comf£X°fc&<, 
[0027] 8U£g§gB& 50a{;£, r5>f^-b7 FF- 
X2 1 0b UL1 SrJt-oT^S. -CDLlfci^TF 

i^y{4. 75^^- FTFFxr&scor, r^-f^- 
F^-yFy-yB 30b« wr ttfflr # a r f f 
y.r&&, 

[0 028] NAT2 0b(Cfc(tS7HU^ 

J&230fcLr, yn-ySVFTFl^yGl t77-f<- 
F 7* F" FX. L 1 jWStJEftW-'oJh.TtJ 0 . ttKH&Sa 
5 0 alCU^O— A/FTF'F-Xi: LXTYVXGliffim 
Izm^^X t>tlX^6, yu-A/M---y FV-y 1 0^ 
75>f<-h^7 FV-yA3 0 aA^ffifila 5 

o a bmgwm-tm^zte. yu-ysvkr Fi^y g i 

[0029] iir. M7nh3;i/7n^j/6 0bl: 
t>(tSTF'PX^220t U, ffIS7Hl/XGl 
t r 7 ^- F T F y L 1 ^^tJCffft S -if, 

arnbn/Pr-^tcov^TJi, LlS-Glfc, ^i-p 

[0030] 0 . mmmmfr^mrn f a 

/L-^-ffiffl LTW7D F 3;UDT-y Sr#.^-r§ fc , 

[003 1 ] ClC03ttf5i£^g4 0 ICtStti VBflm2 
rftSfcWJJSfttt^it. TFF-y G 1 Jft-?t^7 F"7 

-y^^ffo^fc^r^s. 

[00 32] ^;H8 fi, NAT2 0bKJ;-?T«iS« 

^atcS'J 0 ^r s>tii» f fx *f»wtsy o 

3r^>il&*#r*6. NATKi-jtSSttS 
tltzT^-i "<.- F ^- >y F y-y V>T^gP^C0^to 

tflemrs sy'o-ysvFTFFycomti, 75K-b 

^*y N7- y^^a^J; D^v^ iKi:V^nw< 
;PTFF-y^^&fcffiffl-rsfcrt<o^fc LT, $iat= 
nth7u-^)VT Fuxoagr) sr*. -e^a^h 

gptffiSS! t T ^ § WtB 0 ^ T S «fc 0 1= t , ^-iO^B 
V «^n-; -?/FT F F X SrfflKOSIBt i -?T RfOT $ tl 

f u-y *mmzm K>mxh^. -®.mizi£$>& 

[0033] <TC0 j: ^ ^rJ*-^-. NAT20bCfc(K7 
KF^230tLT, y - n-y\*/FTFFyGxfcr 
^y^-FTFFyL ltfMf&fttt^tlX&L Gxii 

r Mtf n* r f u*r *> 9 . < fc t> •eo^fcrfc v » 
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Tl±iftS£?IJIBa 5 0a M±fm—JiA>7 Fl'Xfc L 
4 . if « J: a 3:7 F L-X^KI 0 mX btl&MiNA T 2 

[00 34] iltfifc, GxiWWTHWtU 
2 4 0k Lt^SSia 5 0 alZttm-limtltlT F 
•Ct-flELV^v h7-^fW^l*ft, pare 

[00 3 5] -£<rT\ I8(Oi^:fl7nh^7n 

^6 0b£:BttSTFl'X^gl2 20kLTJi, Gx 
k ti£ < m<0 V 1 k v * -5 (EBBWr r FP-x fcffW *) 

fi«824 0kLTt±» SffilBSitaJiTFI^Vl £fc 

[0 0 3 6] «fflSa«cOT9>f^-h*<xhV 
*k ^ft&T^'f^-F^-y FV-^F*^ 

[00 37] &&HSIBb5 Obtl 
hV-^B3 0bfc#SL, 1 
ttiffiglc 5 0c(i, 75^-^7 F7 
-?C30ct#fiU 75>f<->7HWLl^ 

[0038] L* 1 U^6fi(C. WSSSSBb 5 0 b fe 
J:iy<*«g£*f$§gc 5 0c )()^ISW7'n f- afrZ&i 
X'm.y'uYrsjV^-^^nn^-hh, Z<Dk'-t>t?i> 

tfTvuxLi zn^mmt LxcDmmzRm-f&t: 

[0039] *£TEI9<0J: ttfHS&Bb 50b 
tCOV>Tfi. ^i7Dh3/^n^j/6 0 b {;:£;[ t£ 7 
FP-XS3&2 2 0 b^&WCWilfflTFl'XVl 
4^-FTFWXLl k£WJ&c?lti>.J:3fcU ISKffi 
ilc5 0cC-9V^fi, fl7aha^7n^y6 0 
c IZtStfZ 7 F P X^& 2 2 0 c fcfcV ^T^IMT F 
XV2J:75-f^-b7P)/XLl k £*tJfr3'tt£ J: 3 

k-*- * . -r %*>-hw.Mmmmb 5 0 b c«r fvx 
vu. tsa^ic 5 0c cwafflr f i-xv 2 

[0 04 0] i-h.tioTBasatfc:i3ft6'Ba««2 
4 0fctT«, WSSB^Bbli, 
BkLT. tt£8£9cMU TFWXV2£»0§!gBk 
LX. Ztl?tlttm~3»t>tL. IEL<*-y F"7-7<I*M 
£ffd£k#T'£&. 



[0 04 1 ] HI Oii. 75K-h*7h7-^Cfe 
^T. :Tn-;WrF^x#*M9ST£;ftTVv5rv\ -f 

[0042] *E«iBIa50att, 75^<-17F 
l/X2 10atLTLl^. ££>(C S N AT2 0 b 
let* It* T F L-X^iH 2 3 0 k LT . ^u-J<)V7 F U 
XGU7M / <-b7b'l'XLl ^jSWt&ftTfc 

rn.rn.nmma 5 0 atcii^n-^^rF^fc l 

TrFP-XGlj^W^W? ST^ftTVia. 7n-M7k 
^-•7 hV—7 1 0^75>f^-h*7 0 a 

A'^SMMa 5 0 a fcBSSBftrsfltefcti* 
-A/l^T F 1/XG 1 £fflv ^TMfrtS . 
[0043] #££118 b 5 0bli, TyJ ^-hTV 
W2 10btUL2^. U^LSr**^ NAT 
2 0bfcr*5frM>TF^X3H&2 3 Ok LTJi, 75>f< 
-FTF^XL2 lzi$J&t& 7u -J-sfVT F l^Xtegii 
^tlX&h-?^ Z<7)£z&b, ?u—rt)V*»/ F V-7 1 0 
^7*9 4 ^-F*-/ FV-7A3 0 art>£>*£i£}SttBb 

054, JfeS^IS5 0bi:i, i »aroF3;W;J:4fflfB 
0>*i» 0 K 0 Sri" 4 i k #T'# 4 „ 
[0044] Z\<7)b%. <gm7°X3h-3fl<7°V*ri/60b 
{Cfi{tSTH^S»2 2 0CtJV^Ts fllTKl/X 
V 1 kr^-^-FTFU-XL 1 k£, flI7Fl/X 
V2k7°7W<-FTFl/XL2 k£. ^ft^ftjtfjfrci' 
ft 6 J: 0 hZ-th . -t*t>-hWmL$m a 5 0 a fctfSJB 
7KWV1S. »l£^Bb 5 0b fc«SfflT F P-X 

v 2 £ -tfi-eftjtwteM 'jitxia ic-r a . i*nc a 

0 . BSSB»Bfc:t3ft6fla««2 4 0 1 LTf±. Klgffi 
gfa 5 0 afir Fl/XV 1 Jrftoglt Lt, S^H 
^Bb5 0b{iTF^XV2Srfto^Bi:tT. Ztl? 

tmmmi t>nx * v f v—rmmtimfrtiz . 

[0045] HI lii. 75^^-h^7 F>7-^tcfc 
^T. ^'o-AVl^TF^x^fiJDST^ixT^^^. "f 
^^hgPtii^L^v^B^LTt. fll7H 
W7.2-fJ9 STT*-y hV-?«a-rs*&t:*5V>T, 
/ow^r FW-x* MO ST 'bilTV^^BfcoV^T 
(i, PW7 Hl/XC/nw^r H 1/^ J ftv\ ^'n 
-AVPT F J/X^'fiJ i) ST ^>^T V ^Bt-o^Tii 

[0046] »i£*SI3£Ba50aJi, T^-T^-FTF 
l/X210atULl^. §^>(C, NAT 2 0b 
tCfcftS T F UX^g 2 3 0 t LT „ yu~)^)VT F P 
XG1 tr^-f^-FTFL'XL ItfMJ&ftWktlXfi 

k> . immmm a 5 o a izism-; ^7 f 1 1 
XT \*uxGijmmzm*)%x htix^h . j/o-a/p 

^•y FV-^ 1 0^75^-h*7 FV— 7 A3 0 a 
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frt>mmmw.a 5 0 a ke«sft-r . m 

-A;|/7FFXG 1 SrSWCilfrr-g.. 
[0 04 7] WmmS.h5 0h\$^ 
WX2 10bJ:UL2^S-5, L^L^r^. NAT 
2 0bfc:;fcW-.I>TFFX^|2 3 0kLTi2, 75>f^ 
-hTH UX L 2 fcttJfrf & /n-A^7 F VXiZ<?m 

A ^- F * «y F 7-? A 3 0 a^ffilftSSIgb 

0 te, ifeS&SSIB 50bt turn I- aMz X 

0 JK 0 £f & Z. k h . 
[0 048] ,I<7)k^ ^=iirah3^radf^6 Ob 
tCfettSTKUX^2 2 0tCt3V>T. 1*1^7* F FX 
Gl k7°yj<- FTFF-XLlkSr. 'gJlfflTFF-X 
V2k:T5-f^.-FTF^XL2kSr. -tft-m^J&o' 
ft-g. J: ^ tc-TSo -?%:i>-hlMmMmW.a. 5 0 aKI^Sffl 
T FF-XG 1 Sr , SUISSE b 5 0b MfJSfflT F F-.X 
V25: Zix^iltf mm K>¥XZ>J:o iz-fh . £*itc i 

0 s It*f$§B«3«-|>MlffR2 4 0 k fCti, 
§§Ba5 0ateTFFXGl£ft^f!|gkLT. 1&%m 
mm.b 5 0b{iTFFXV2£f^§i|Bk IX. ^tl? 

[0049] gjJ^Tiai 2ti£imi 3£IB<rVt, 
T-oFn^rndf^cofll^^KBB-r?.. 01 2ii. W.W 
tMMcO'tfarn F n;F:ro^ >-coffifiSt-r'*> h „ 

[0050] ^ffifflijco^irn f n^rn^r^ 6 o b 

ndf-^iaMffSB&7 0c7)S*fcJ:t/'g«7°nF3;urn 
p d u n<?rr y wxftfg^r r F* F-.X^&-$-S TYUX^. 

SN. 1M I BgiA6 4fc<J:i;7F^^16 5 

4SNMP^-y-fe-yaafs»6 63&»iJ>**. 

[00 5 1] WmMW4 O^iLfcfirn F n;F<0 
* -y -b- >?^i^ffl!lC0^ar n F 3/l-7D^ 5/ 6 0 afc 
J^Tf^Tu F n^rodr >-f-^^3S»$fLT „ » 
EfflKoftrn h u)\,yu*is\izfflg%ti& k . *f 
rodf i'lSilfi & 6 1 #S£fS§;ftfc*3:rn F 

7°c? F n/FTndf jo*-:?S:#*?U T F F-X^MPl 
ffi6 3Srt\ rF^*£»8ra»6 3tts ASN. 1M 

1 B Jg*S:6 4 & ilA'T F 6 5 Kft-o T , 
»3 tifctmrn F o^f 5^-5'— 9 (VmSjtT F F 
Xf- 9 . ilflftT F l/Xf- * s $ ^ KfcST* n F a 
/F<7?PDUi£OTFF^ffif8£7F*F-;*.^g|U ^fftife 



-?*i:fcfrj|?g|56 2{2. 7-n^^7*-^«ff*»6, i*ft 
ifeflHBs SftTcfPfL ^arnFn^PDU^IROffi 
U SNMPjrf-y-fe— i^MSftSP6 6ta[^-„ SNMP 

SBSOtWtT. WB7"nh3rt^)PDUftjffl|>f 

*. -r^^sNMP^-yfe-^'^jiff-rs., 

S5 0»i. iifi^tutSNMP^-y-fe-^^JlE-rSJCE 
giSNMP^'y-fe- soMS«3B6 6fc:3S-$\ SNMP 
P<"/-k->'*j*S«SP6 6i±, Sfib^jKSOSNMP^ 

^ffl*»W^6 2 fctW. 5^(:rn^^f-^IM 
W*14. iHfS5fe. j*ft7C. JBS-C**«aroF3/P« 
PDU&7 F UX^i«iaBtCjg-r . T F F ^SUMPI 
S66 3i±. ASN. lMIBtiX6 4*jJ:^7KFX 
3£M%.m 6 5 *C , mZtvkfP£7* F n;F7-odr 
xx-^cOj^ItcT F W-^, Mft^feT FFX-f- 
5<i>t^roF3;F<?)PDU4»<0TF'F'X'tS?g2r 

6 2fc«ft. S^lCTo^f^7 ; -^WfflAg|56 2tt. 
iM«5fe. iiffTC. fa>-nh3;W0PDU*«|>-nh 
3/Frodr^T-^k LTffl^.*TT. Ta^^ilfl 
SP6 lteiW\ To^^raaflgP6 Hi. Wrnba 
;F7'nJf i^-f— ^ ^SsS»*irn F 3;FTodf >- 6 
0 a^kSmt. IS^M^aro F3^F7°o4f v-6 0 
a#fHUgg4 0MI7O F n;F<7)P D U 
[0052] iCT. ASN. 1MIB£8S6 411 
RFC1212 (Concise MIB Definitions) 3r k 'tlBK^fLf 
V^MIB^-y^'x J? Fc0aW^IB^*-i*TJ>-g. k 
C7) s ASN.l (Abstract Syntax Notation 0ne=ffijMf;£!E 

S.l) (ciOSEifiSiifeMiB^Eflx&S. Hftte, AS 
N.ltiiiHIBSfefctt. ^^MIB^^a-ZF^^L^ 
«tJ:r>TJ!K<&B!8itT^4. *HMCTT1i:. AS 
N. KcJ:4MlBSg«S:*lSWUT»feit4flMfiSrffi 
fflLT®a7*nF3;FC07*oF3;F7-*— 9^-— >y F^Va 
riable-bindingstC^-t il-l) T F FX£:^J&-3~-?>*:#>» 

[ 0 0 5 3 ] 0 1 3(i s $kmmcDWgy°n b zul<T\3* 

5scomi&x'f>&. mmm<^smynb^^yu^^6o 

a{± N S^IS4 0±OSNMP1£MV^- ^>4 1 k 
tfOlS-CSNMP^vfe— ^iHgd^-SSNMP^ 'y-fe 
-^■jl^flg|56 6 k . tiro F 3;FTo^r ^-9(0 
ttMm±*mS.?&7u*is?-9miL-ftM%l6 2 k . 
WmmnWQTv b 3/FTndf v- 6 0 b k ois<orn 
* HSMff HI&7 OcoH^fci^^rn F 3^7*n4r 

y^~9<r>^m^mmt^Tx3^i^smm^e 1 k* 3 

fe5r&. ^S^g4 0i7)SNMPgS7*->'>4 1 
Wftff LfcSNMP^7 -b— S^ffiffirooWro F 3 
;FTndfi/6 0atJS§^|,k. SNMP^t-y-b-^iM 
SffSP6 6^'SNMP^-yfe-^^SfSL. ^tL^Tn 
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SNMP*^-^£JR"3ttiU SNMP^-y-b-^iM 
«A*6 6tC«rt\ SNMPpC.yfe-^SS«1S«tt»S 

±(7) S NMPMv^y> 4 lfcj&fo 

is 6 0 a t M^afa^^MT n F n;l^rn^ x 6 0 b fc 
^o:Tnaf S/«B1A«K7 0±T5»A S*ii*ar 
o F a/l/rn^x-:?^Hm:'& 0 . fITn F r?/P 

7U. SNMP^ vfe-^iM«5fes SNMP PDU^ 

[00 5 5] 0214. M^SNMP^7-fe-y^^ 
•y FcoHT*$>£o >^>y MW-y F V-^JTCfeS t Z 

S<7>SNMP^>y FT'f4I P«l^WT^i£fft7c. & 

i*Ajtefc*oT^4 0 
[0 0 5 6] 03t4. firnN3/W«SNMPt*& 
i^c7)fl7n F 3;l/7n^yf-^^^y FC90T* 
^7Mi*7h^?)lt*4t:^I Pig 

;l/7o^yf-?W^7 FKtHVtJj, I P«l^A- 

x*<mmt, mmmt. rro*5/irerai«7ooiw 

U ir- 3 yli:fflStSf!7o F 3^7n^yf- 
^Cffiffltl>fiS&%7Kl/Xll 3(MW>WI/«ry 

t>„ i pji^fefe^v hv-^s^^T^afi^M 

[0 0 5 7] i 5 t:f I7U b 3/P7nJryf-"^ 
±<7)SNMP^>y^-^ft7n. mmfiiTVUXZTV 

w f u^TJ«r v >oaiflWrr f i» xiim? h z 



T77^-h^7h7^^*7f7^ WW" £ <! 

[0058] 115, 016. 017, HI 8£ffl^ 
T. rn^^xW«i*M»»6 2 Sitters • HI 5 
!4. rn^^7 f -^IB44MB*6 20«lR'C*6, 

[0059] TO*a'X~*«£4WW»6 2 tt % fflji^ 

■fe-^iH« 5tr F S N M P * >y -fe-^JM 

[0060JH16J4. ffl^TU*is%mcO%MMT$> 
5, S»t3 1 Hi. iHm^feTF^comi^^T-^ F 
36*1 0 0t*JSNMP^ y-fe— vte. T H 1^X^*2 0 
0. 1 0. 2 0. 3 0c0«^irubr27^ o u^^kM 

[006 1 ] jg*ff3 1 2 {4. aAjfeTHl^^JBl* 
?f7^1 0 1. S2^f7 F#U OtJSSNM 
P^7^y(l 7KW2 0 0. 1 0. 2 0. 3 0 

[0 062] g«tf3 1 311. iSAifeTHU^cOffil* 
?f"yF**l 10. S2^f7h^2 0, If^^x 
*y h#8 0T*l)SNMP^ y-fc— ^14. T F]/X**2 
30. 5 1. 6 2. 7 2^Srnhn;^ 0 n^f^ai 

[0 063] je*fr3 1454. jUA*T FU^l 2 
0. 6 0. 11. 8T"l)l)SNMP^7^yll 7F 
1/^23 0. 5 1. 6 2. 7 2<7)SI7aha^7o 

1 £ Mm %T F l/^iififfl7 F PXfc JHV 
[0 0 64] 017(4. 7D^yf-^MMI^)7P 
-ft-htfci, Xf7715 lTSNMP^y-fe-Sog 
SfiSP*^SNMP^v-fe-S^Sr^SXSo Xf7715 2t 

AJfcTFl^HXIJttM-. Xf771 5 
-^>£>SNMP PDU^Oft-To Xf771 5 4 TJX "9 tiJ 
Lfc5Sft7crFPX. imtftTFKX. SNMP PDUSr^a 
7nb^/D*yf-^tffittt4. Xf771 5 5 
tflf7D S^S»^ -CSNMP^< ^y Hr— ^IP^ y 
^ffi 0 tiJ LfciSA *T F 1 1tfm-J»Z>tiX V 
7Q^y7FU^SiL, fc0lB$7n*y7Fl/X 

4 ^ l:LT7n^yf-^14WifI7n h a 
is*f—9 ^> • 

[0 06 5] HI 8(4. 7P^yf-^^IIi ? )7P 
-ft-bT*4 0 XT771 6 1 t7o^ ^fSfflftSK 
4>^7oN^l/7n^yf-^ts f^«7nb 
3;U7^*5^-^^3aALfeS#*C*&«irn hr? 
^Tn^y^rFl/X^^fll), XT7716 2TH 
I7nbn^7ndryf-?4^s iHfiTcTF^-X. x* 
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HftTVUX, SNMP PDUSrBX *) ffi-f" . Xf'/ri 6 3T 
M 0 tU L ilfiTcT F l^X t iifiJfeT SrSNMP^ >y 
•fe-v'OIP^v^iJtsfafiW'*. Af77164tl 1 ) 
JijLfcSNMP PDU^SNMP^t -y-fe— ^ZtS#H-S. J3Lhc0«t 

[0 0 66] 01 9*4. THU^Sai»Si»6 3<0«l* 
**bWW. 7Fl/^j!PiS6 3il SNM 
P.X •y-fe-^<^SIi«5c4:i3S«*<OTKU^Sr3SSrrS S 
NMP> -y-fe— io&fgTEjMfl^T F UXg^KB 8 5 i: , 
S N M P P D U F*| {C* * tl& T F l<-J*til¥B£^4-f S P 
DUTFI'X30&«B8Oj&»&2:&. §fetPDU7Hl^ 
xS»igB8 0<i, PDU<?5WWi:rKP^Sa»*JSa-t 
-g>PDUj|?tff^$tg|58 1 i:. PDUlC-^^tlSTFl^X 

2fc, PDUC#iW7t«Wffii«HM I Bffik 
LT#£ftS T F l"Xc^»Sr«Slt- h M I BffiT F U 

^s»S8 3fc. p Dui^^n^ r f vx>m.<ry o *> 
rmmjcT f i^x t u-c-frifr* r f uxo^ 

& h 5 -y TiMflTCT F l^X^gB8 4 1 

I). 

[0067] rndf ^-r-^S&SWWBSB 62H, T F 
17n F ^x— 9 ^CO SNMP^-z-b-yl 

ftjCs jift^^v^TTFi/xsm^a. act snm 

P^ •y-fe-> ; 5Mff7niMmr FPX^8lg&8 5tt, <ga 
7D h n/l^ro* >-t— * £ P D U»¥8r^ftgB8 1 CcjS 
t. pd uttW£9fta58 l li . «3*ufc*3To ha/P 

DU*^h7-yriift75TF^gP^-&ttJ±5t- h5-y 
7°M(a7cTFV'X^3ftgP84fc^t, F 5 >y TjUftTCT 
FW*.^&&8 4{4, 7FPX$ig«6 5C^th 
7 -y rjlff tut F l/X£T F P^^ft UPD UgfffX 
811958 1 (CiBf. PDU»tf3e»aP8 1tt. F5-yTM 
«7CT F I^S3ftfS8 4 WR-o jfc33*«tf)r F UX 

3£>fc, PDUi^x-^^aSU^I PTFl'X* 
3Ur$-fc«9T**M I BfflSr»ajL. M I BfTh'W 
3H*a58 3l=8EU Ml B«TFPX^8lg&8 3J4. 7 
F^X«£g|6 5tft-JtM I B«*T FU-XSHUL 
TPD Uj$WTS$lffi8 1 fcjg-r . P D UJBUf^ggB 8 1 
ti, M I Bi7Fl/X»8 3/!i^SI-5t»^ 
TFl^XT, PDUOTIBlIMIIIiS. £ 
IC, PDUMM I BCDsJ-^x^hMWIHFSttUJL, 

*7hmm?Tvux%mu8 2ii. asn. imib 



Sffetfc T F^x^|5g«6 5 t t«->T*/yi 7 F 
f^'J-f^fcr-g-SitS I P7Hly^^7H^iL-C 
P D UMVr3m?$8 1 P D UflWf£&i!8 1 

tz^Mk<n 7KW', P D U CO M I B O 7Vx ? h 

YVxm&Z'fi'itdkcr) PD U Sr^A/i^STn b 3/V 
7° o df >-r- ^ £ T u ^x- ? &Wft!¥gB 6 2 Kjg 
fiLt<7> io(:LT7F i^x^mMagPiif arc? h 

[ 0 0 6 8 ] 02 0 (4. 4"7>'x ^ h^SiJ-?T F l^X^ 
}iSP8 2«Tft4 . ^yyi ^ FiU?'J-?T Fl/X^ 
mSB8 2«, ASN. lMIB5gf££:6 5$:j5?irfSA 
SN. 1M I B^A»^gP88t. JMSUSMI BtfD 
fc t W7xi ? FSIS^S-^-f 

TttasgP8 9i:, pv\iMffi$mm8ifrhm%titt 

7 vx ^ Fm^'Jxi: , S«*f«*y^i ^ MWJI^aj 
SP8 9«litBltety^i^ F^fft^JrbKUT, % 

•th^y=j^hmmmM8 e t , m^nmyj 

^«6 5 k tcae^v^r . jj-y^'x ^ f^jtstt fi^-x 
^■ri.T f vx$mmm8 1 1 . 

[0069] iT. ASN. 1MI B^Bdfflf»88 
4* A S N . 1 M I B %MX 6 5 £ ft t , M 

^aajgB8 9(±. as^M i Bim<o* 

7 YWSVmz I P7 F ZStSBiMtfrfc SMI B^" 
7>'x^FSr»aiL, KS-t4M I B*7iSx?h0>* 

6/v sa-n»M i b hwfemmmx'fo&b 

Z%cr>INDEXtfm£T}'l'X3m£fiM87^tl 

S:#tf^"|gffi^-i»M I B^-yy'x? FtJ4. M I Bf 
-r/l^Slib-rM I B^7yx^ FT* 1 ?, f— 
I NDEXtUttSnM I Bt—7VM*3MI B:*y 
>>'x ^ FcO 3 1 ^>lii±^ I P T F Wt*l J: 0 * 
MIB^i^hW. J1C0J:^^7^x^ b 

(4. m I Bsj-r^x? F«offiT*Sti6<o>f yx^y 

XjGETUm h^t'TK#t--l>^tcM I B^-7"^" 

xi? h^/yi? FW8FF(oKfrc^ >x?>xmwi 

T-TJb&t ;5(7)IND EX§-ftjDtT 1 7'Vx 
^ F^glJ^ t tTt§S-f IOtl^)I NDEXC 
I PTPPXAlHJiiSftiA, ^7*iy*x^ MRSfffc 
I PTFPX7&^-t^«r*gtt* J *St><7)TS.&. 4 
fc. TFU-X^^|fi : gP8 7^4S-riNDEXffifRtt 
T14. Ml Bx-7"/ktfOINDEXi;LTlilt<73MI B 
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PTF UX<7)&ftm?Z$&&t&tl#>l£ N INDEXt 

sYNTAxzmiz£'<.timm*wi-t. mm. ind 

EXt LTSifcOM I B^y'i^Mo!: I PTFl- 
x£IXI>J:?3:M I Bf-7;F<0i§iir, -fyx^xti 
gimi, m<7)*<?)l-^i; I PTFL-Xtf0^4-?^fh 

z(Do-h&2&mfrt>5mB<owmM^$: i ptf* 

iffi87MNDEXI±, StlOt I P7HI/X1 

[0070] 2T.r,rt\ PDU»W^mgP8 l*><i>P 

DUWry'i ? FftSU^^-Vx ? FtftS'FTT H 

Jt*SE8B8 6*<^yy* ? FWWf . *7V* ? 

hlK5iJfitKf8 6tt. P D UfitfraBftffiS l 
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(54) NETWORK MANAGEMENT SYSTEM 

(57) Abstract : 

PROBLEM TO BE SOLVED: To allow data communication between nodes having no global 
address . 

SOLUTION: The network management system manages a network system where a 1st 
network and a 2nd network adopting different address systems are connected via an 
address converter. The 1st and 2nd networks respectively have nodes and 
management protocol proxies and each management protocol proxy has a management 
protocol proxy data generating section that uses a sender address, a destination 
address, and a protocol data unit included in a packet in compliance with a 
management protocol sent from the node for management protocol proxy data and 
with an address conversion section that converts address information in the 
protocol data unit included in the management protocol proxy data sent from other 
management protocol proxy. 
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CLAIMS 



[Claim (s) ] 

[Claim 1]A network management system which manages a network system to which the 
1st network that differs in an addressing architecture, and the 2nd network were 
connected via an address conversion device, comprising: 

Have said 1st and 2nd network, respectively and a node and a management protocol 
proxy said each management protocol proxy, A management protocol proxy data 
generating part used as management protocol proxy data which uses as data a 
transmission source address, a transmission destination address, and a Protocol 
Data Unit which are contained in a packet of a management protocol sent from a 
node . 

An address conversion section which changes address information in a Protocol 
Data Unit contained in management protocol proxy data sent from other management 
protocol proxies . 

[Claim 2] Said management protocol proxy has the address defining information 
which matched and carried out a transmission destination address included in a 
packet of a management protocol sent from a node, and an address of a management 
protocol proxy, The network management system according to claim 1 which 
determines an address of a management protocol proxy of a transmission 
destination from a transmission destination address to which said management 
protocol proxy data generating part has been sent from a node, and said address 
defining information. 

[Claim 3] Address defining information which said management protocol proxy of at 
least one network of said 1st or 2nd network has, The network management system 
according to claim 1 defined by an address which is not defined by said address 
conversion device and an address of a management protocol proxy matching. 

[Claim 4] A proxy of said management protocol has the address translation rule 
which defined address translation information, and said address conversion 
section, The network management system according to claim 2 which changes address 
information contained in a Protocol Data Unit of a management protocol by ASN.l 
definition statement of an MIB object which is said address translation rule and 
the target of conversion. 

[Claim 5] A network management system with which several networks with which 
addressing architectures differ manage a network system connected with an address 
conversion device, comprising: 

Have two or more node and two or more management protocol proxies which were 
connected to each network, and said each management protocol proxy, A 
transmission source address and a transmission destination address which are 
included in a packet of a management protocol sent from a node, a management 
protocol proxy data generating part which uses data in a Protocol Data Unit as 
proxy data of a management protocol . 

An address conversion section which changes address information in a Protocol 
Data Unit contained in proxy data of a management protocol sent from other 
management protocol proxies . 

[Claim 6] It is a disposal method of a management protocol which processes a 
packet sent from a node and transmits, A transmission source address included in 
a packet of a management protocol sent from a node, A disposal method of a 
management protocol which changes address information in a Protocol Data Unit 
contained in proxy data of a management protocol which used data in a 
transmission destination address and a Protocol Data Unit as proxy data of a 
management protocol, and has been sent from other management protocol proxies. 
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[Claim 7] It is the storage with which processing of a management protocol which 
processes a packet of a management protocol sent from a node, and transmits was 
memorized and in which computer reading is possible, A transmission source 
address included in a packet of a management protocol sent from a node, Data in a 
transmission destination address and a Protocol Data Unit is used as proxy data 
of a management protocol, A storage with which processing which changes address 
information in a Protocol Data Unit contained in proxy data of a management 
protocol sent from a proxy of other management protocols was memorized and in 
which computer reading is possible. 

[Claim 8] It is a program which processes a management protocol which processes a 
packet of a management protocol sent from a node, and transmits, A transmission 
source address included in a packet of a management protocol sent from a node, A 
program which changes address information in a Protocol Data Unit contained in 
proxy data of a management protocol which used data in a transmission destination 
address and a Protocol Data Unit as proxy data of a management protocol, and has 
been sent from a proxy of other management protocols . 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] This invention relates to a network management system, 
and relates to the network management system which manages the network system to 
which several networks with which addressing architectures differ mutually 
especially were connected. 

[0002] 

[Description of the Prior Art] Now, the IP address which is a network address most 
widely used on the Internet etc. is an address which is prescribed by the 
protocol called IPv4 (Internet Protocol ver.4) and has a 32 -bit address space. 
The network address must be assigned at a meaning to the apparatus connected to a 
network, and assignment has been performed so that it may become a meaning with 
the organization etc. which are called NIC about the network address of the 
apparatus linked to the Internet. In IPv4, since it has a 32-bit address space, a 
piece, i.e., the address of 4 billion, can be assigned the 32nd power of 2 at the 
maximum theoretically. However, if the apparatus linked to the Internet 
increases, it will become difficult to assign the IP address of IPv4 to all the 
apparatus linked to the Internet. 

[0003] The address conversion function it is indicated to be to RFC1631 (The IP 
Network Address Translator) which IETF defines to be widely used as art for 
solving this problem, It is the method which combined the private network 
indicated to RFC1918 (Address Allocation for Private Internets) . This method is 
premised on all the apparatus that exists, for example in a network with a local 
network in a company, etc. not connecting with the network of the exteriors, such 
as the Internet. That is, first, the network with a local network in a company, 
etc. assigns an IP address using the address of the range of the private address 
indicated to RFC1918, and builds a network. It is made not to connect with 
external networks, such as the Internet, at this private address at this time. 
About the apparatus linked to external networks, such as the Internet. Between a 
local network and external networks, such as the Internet, Connection is made 
possible by arranging the address conversion device indicated to RFC1613, and 
changing into the global address for accessing the address of a transceiver 
packet from a private address by address translation at the Internet. A global 
address is an address assigned by NIC etc. here. At this time, a global address 
is assigned dynamically and a device which utilizes effectively a limited global 
address -- two or more local nodes enable it for a timetable to share one global 
address etc. -- is also performed. 
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[0004] By the way, in the address translation indicated in RFC1631, rewriting of 
the IP address of the transmitting origin included in the header of an IP packet 
and a transmission destination and change of the checksum of the IP header 
produced in connection with it are re-calculated and replaced. Communication by 
TCP/IP is attained by this and communication by the protocol of the upper layer 
is also attained. 

[0005] However, although the IP address is included, for example in network 
management protocols, such as SNMP, also in the Protocol Data Unit (PDU) 
exchanged by a management protocol, Address translation of this portion is not 
carried out in the address conversion device indicated to RFC1631. 

[0006] On the other hand, in addition to the function of the address translation 
indicated to RFC1631, to JP, 11 -187058 , A, an address conversion device which 
carries out address translation also about the Protocol Data Unit of a management 
protocol is indicated. 

[0007] 

[Problem (s) to be Solved by the Invention] However , it will be performed by 
communication of the management protocol using the global address which can be 
used in the network by the side of a controlling device when an address 
conversion device performs employment by the private address and a global 
address. For this reason, communication by a management protocol can be performed 
only to the node to which it is in a supervising side and the global address is 
assigned. However, in network management, if manageable also about a node without 
such a global address, it will become possible to perform more effective 
management. In the method of JP, 11-187058 , A, it is not indicated about this 
point . 

[0008] The purpose of this invention is to provide the network management system 
which can perform the data communications by a management protocol also between 
the nodes in which the network of a different addressing architecture does not 
have a global address in the network system connected by the address conversion 
device . 
[0009] 

[Means for Solving the Problem] As a way stage which attains the above-mentioned 
purpose, the 1st network that differs in an addressing architecture, and the 2nd 
network are the network management systems which manage a network system 
connected via an address conversion device, and the 1st and 2nd network is 
provided with the following. 

Have a node and a management protocol proxy, respectively, and each management 
protocol proxy, A management protocol proxy data generating part used as 
management protocol proxy data which uses as data a transmission source address, 
a transmission destination address, and a Protocol Data Unit which are contained 
in a packet of a management protocol sent from a node. 

An address conversion section which changes address information in a Protocol 
Data Unit contained in management protocol proxy data sent from other management 
protocol proxies . 

[0010] Thereby, data communications can be performed between proxies of a 
management protocol, and data communications can be performed between nodes 
without a global address. 

[0011] 

[Embodiment of the Invention] Hereafter , the example at the time of applying SNMP 
to a management protocol according to a drawing is described. Drawing 1 shows the 
concept of the network management system explained by this example . 

[0012] This system The global network 10, the private network A30a, NAT2 0 a which 
has the private network B3 0b and performs address translation for the private 
network A3 0a and the global network 10, The private network B30b and the global 
network 10 are connected by NAT2 Ob which performs address translation. 

[0013] The node 80 for supervising is connected to the private network A3 0a. This 
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node 80 has the management protocol proxy 6 0a which performs generation of the 
monitoring instrument 4 0 which performs processing for supervising a monitored 
device, and the proxy data of a management protocol, address translation in the 
Protocol Data Unit contained in proxy data, etc. 

[0014] The management protocol proxy server 60b which performs generation of the 
nodes 50 and 90 which are monitored devices, and the proxy data of a management 
protocol, address translation in the Protocol Data Unit contained in proxy data, 
etc. is connected to the private network B30b. 

[0015] In such composition, the node 80 for this network management system to 
supervise manages the nodes 50 and 90 which are monitored devices. 

[0016] When the monitoring instrument 40 of the node 80 of the private network 
A3 0a performs the node 50 and data communications which are monitored devices, It 
is made to perform data communications between the management protocol proxy 60a 
of the node 80, and the management protocol proxy server 60b of the private 
network B3 0b. This becomes equivalent to having formed the communication path 70 
between proxies, and the virtual communication path to call. 

[0017] If it does in this way, when the address used in the private network A3 0a 
differs from the address used in the private network B3 0b that is, data 
communications can be performed between the networks of a different addressing 
architecture. Data communications can be made possible even when the firewall 
etc. which pass neither the address of a private network nor the address of 
global network are formed between the private network A3 0a and the private 
network B3 0b. 

[0 018] Operation of the whole network system more concretely shown in drawing 1 is 
explained. Drawing 2 shows the SNMP message packet of management protocol SNMP of 
a node . Drawing 3 shows the packet of the management protocol proxy data of a 
management protocol proxy server. From the packet of management protocol SNMP 
transmitted from the node 50 which are the monitoring instrument 4 0 of the node 
80, and a monitored device, and the node 90 to namely, the management protocol 
proxy 60a. As for the management protocol proxy server 60b, the transmitting 
origin currently held as transmission destination [ in the header of IP layer 
which is a network layer ] , and transmitting origin stores transmission 
destination information in the management protocol proxy data which is equivalent 
to the data of the application layer. Connection-oriented TCP is used as the 
transport layer of the packet of management protocol proxy data. Transmission 
destination [ of the management protocol proxy data itself ] and transmitting 
origin serves as a management protocol proxy or a management protocol proxy 
server . 

[0019] From the monitoring instrument 40 here to the node 50 or the node 90 which 
is a monitored device to the monitoring instrument 40 from the node 50 which is 
the opposite monitored device, or the node 90. Data flow in case communication is 
performed via the management protocol proxy 60a and the management protocol proxy 
server 6 0b is explained. When the data of a management protocol which the node 4 0 
which is a monitoring instrument transmitted is sent to the management protocol 
proxy 60a, the management protocol proxy 6 0a, Management protocol proxy data is 
generated combining original transmission destination [ of the data of a 
management protocol itself, and the data of a management protocol ] , and 
transmitting origin, and management protocol proxy data is transmitted to the 
management protocol proxy server 6 0b. From the received management protocol proxy 
data, the management protocol proxy server 6 0b takes out the data of a management 
protocol, and an original transmission destination, reconstructs the packet of a 
management protocol, and transmits to the node 50 which is a monitored device 
which is an original transmission destination. At this time, the response from 
the node 50 is transmitted to the management protocol proxy server 60b by what 
the transmitting origin of the packet of a management protocol is made into the 
management protocol proxy server 60b for. The management protocol proxy server 
6 0b which received the response packet of the management protocol from the node 
5 0 changes the response packet into management proxy protocol data, and returns 
it to the management protocol proxy 6 0a. The management protocol proxy 6 0a 



- 5 - 



JP 2002-190810 A 



reconstructs the response packet of a management protocol from management 
protocol proxy data, and returns it to the monitoring instrument 40. 
[0020] In the environment which cannot carry out direct communication between 
nodes as mentioned above using a management protocol, communication by a 
management protocol can be performed now by passing a management protocol proxy 
and a management protocol proxy server. 

[0021] The management protocol proxy and the management protocol proxy server have 
an address conversion function which changes the address of the PDU portion of a 
management protocol. By this the address of the node contained in the Protocol 
Data Unit ("PDU" is called hereafter.) of the management protocol of a node by 
changing into the virtual address for network management, It is manageable as if 
the node had a virtual address. The virtual address used only in the network 
management at this time is called an "administrative address" by this example for 
convenience . 

[0022] In the composition shown by drawing 1, although the case where the 
management protocol proxy 60a was realized by a program was explained, the 
function of the management protocol proxy server 60b is realizable by a program 
similarly- In this case, a program is recorded on the magnetic disk which can be 
read, an optical disc, and a magneto -optical disc by computer, and the node which 
takes charge of the function of a management protocol proxy server reads and 
executes a program. 

[0023] Next, NAT shown in drawing 1 is explained. NAT shown in drawing 1 is semi- 
** (ed) to RFC1631. Drawing 4 is a figure for explaining the function of NAT. In 
the network to which the global network 10 and the private network 3 0 are 
connected via NAT2 0 as shown in this figure, GO is assigned as the global address 
200, and the node 40 explains a monitored device about the case where LI is 
assigned as the private address 210, and Gl is assigned as a global address. In 
this case, the conversion table 23 0 which that global address and a private 
address matched is formed in NAT20. This transmits a packet to the node 50 side 
from the node 40 side to the address Gl . NAT20 changes a transmission destination 
address into LI from Gl according to the conversion table 230, and transmits the 
packet towards the address Gl to the private network side. Namely, as a packet 
which arrived from the node 40 side to NAT20 like drawing 5, What was a packet 
containing the information of Gl a transmission destination as header information 
of IP layer portion equivalent to a network layer, When hooking up from NAT2 0 
towards the node by the side of a private network, like drawing 6, as header 
information of IP layer portion, a transmission destination becomes a packet 
containing the information of LI, and is transmitted. When transmitting a packet 
towards the node 4 0 by the side of global network from the node 50 by the side of 
a private network conversely, As a packet which arrived from the node 5 0 to 
NAT20, what was a packet containing the information of LI a transmitting agency 
as header information of IP layer portion, When hooking up from NAT2 0 towards the 
node 4 0 by the side of global network, a transmitting agency is transmitted as a 
packet containing the information of Gl as header information of IP layer 
portion . 

[0024] What is necessary is just to set up by such work of NAT20 as what has the 
private address LI as setting out of the network of node 5 0 self, When it can 
communicate using the private address LI when the node 5 0 and other devices in a 
private network communicate, and communicating between the devices by the side of 
global network further, it can communicate using the global address Gl assigned 
by NAT20. 

[0025] Here, NAT was explained as what has the function to perform address 
translation of IP layer (address translation of the PDU portion of a management 
protocol cannot be performed.) . In the network using such NAT, as already 
explained, the address of the PDU portion of a management protocol is changed in 
a management protocol proxy server. 

[0026] Hereafter , a more concrete network system is explained. Drawing 7 is one of 
the examples of application in a network management system, and is the 
composition in the case of managing using the formal global address assigned to 
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the supervising side device as an address for network management . 

[0027] Monitored device a 50a has LI as the private address 210. Since an address 
called this LI is a private address, it is an address which can be used only in 
private network B 3 0b. 

[002 8] As the address translation 230 in NAT2 0b , the global address Gl and the 
private address LI are matched, and the address Gl is statically assigned to 
monitored device a 50a as a global address. In carrying out direct communication 
to the monitored device a50a from the global network 10 or the private network 
A30a, it communicates using the global address Gl . 

[0029] By matching the administrative address Gl and the private address LI as the 
address translation 220 in the management protocol proxy 60b here. About the 
managed protocol data in which Gl is sent to the surveillance side by LI from a 
supervising side about the managed protocol data sent to a supervising side from 
the surveillance side, LI is changed into Gl, respectively. 

[003 0] Thereby, when the data of a management protocol is referred to from the 
monitoring instrument side using a management protocol, it is visible as if the 
monitored device a50a had the address Gl . 

[0031] For this reason, as the management information 240 in the monitoring 
instrument 40, the monitored device a is matched as it is a device with the 
address Gl, and it can perform network management using the address Gl . 

[0032] Next, drawing 8 is a case where the global address assigned to a monitored 
device by NAT2 0b is assigned dynamically. There are few global addresses which 
can generally be used in the private network connected by NAT for external 
connection than the number of the devices in a private network. If assignment of 
the global address to a device is assigned as a method for utilizing few global 
addresses effectively only while the device has connected outside, and the device 
ends connection with the exterior, The method reused by other devices in the 
global address which the device was using is used. Thus, when assigning a global 
address dynamically, the global address generally assigned to one certain device 
changes with those times. 

[0033] In such a case, as the address translation 230 in NAT 2 0b , The global 
address Gx and the private address LI are matched, Gx is an address which chooses 
and is chosen from the addresses of each time more fixed choice, and the address 
Gx will be dynamically assigned to the monitored device a50a at least as a global 
address at the time. It is determined by NAT2 0b what kind of address is assigned. 

[0034] temporarily, supposing it uses Gx as it is as an administrative address, 
since E the ] it sometimes comes out, and it can change, the continuity of 
management cannot be maintained and right network management cannot be performed, 
the address matched with the monitored device a50a as the management information 
24 0 in the monitoring instrument 4 0 is a problem here. 

[0035] Then, as the address translation 220 in the management protocol proxy 6 0b, 
a virtual address called VI [ completely different from Gx ] is statically 
assigned like drawing 8 . Since the monitored device a is matched with a thing 
with the address VI as the management information 24 0 in a monitoring instrument 
by this, network management can be performed correctly. 

[0036] The private network of drawing 9 of a supervising side is an example when 
the private address of the monitored device in those with two or more and these 
private networks is competing. 

[0037] The monitored device b50b exists in the private network B30b, and has the 
private address LI. The monitored device c50c exists in the private network C30c, 
and has the private address LI. Although the mutual address is competing, since a 
private address is used only in the private network in a communication top, a 
network does not get confused. 

[0038] however if the data of a management protocol is acquired from the 
monitored device b5 0b and the monitored device c50c using a direct management 
protocol -- which [ the ] although, in order to answer the information as a 
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device with the address LI, A monitoring instrument gets confused and the problem 
that network management is correctly impossible occurs. 

[0039] Then, like drawing 9 about the monitored device b50b. In the address 
translation 220b in the management protocol proxy 60b, match the administrative 
address VI and the private address LI, and about the monitored device c50c. In 
the address translation 22 0c in the management protocol proxy 60c, the 
administrative address V2 and the private address LI are matched. That is, the 
administrative address V2 is statically assigned to the monitored device b5 0b at 
the administrative address VI and the monitored device c50c, respectively. 

[0040] As the management information 24 0 in a monitoring instrument, as a device 
with the address VI, the monitored device c is matched by this as a device with 
the address V2 , respectively, and the monitored device b can perform network 
management correctly by it . 

[0041] In a private network, the global address is not assigned, i.e., the 
exterior of drawing 10 is an example in the case of assigning and carrying out 
network management of the administrative address also to the device which is not 
connected. 

[0042] The monitored device a50a has LI as the private address 210a. As the 
address translation 23 0 in NAT2 0b , the global address Gl and the private address 
LI are matched, and the address Gl is statically assigned to monitored device a 
50a as a global address. In carrying out direct communication to the monitored 
device a5 0a from the global network 10 or the private network A3 0a, it 
communicates using the global address Gl . 

[0043] The monitored device b50b has L2 as the private address 210b. However, as 
the address translation 230 in NAT2 0b, The global address corresponding to the 
private address L2 is not defined, and, for this reason, direct communication can 
be carried out to the monitored device b50b from neither the global network 10 
nor the private network A30a. However, the monitoring instrument 40 can exchange 
the information according to a management protocol in the monitored device 5 0b 
through a management protocol proxy even in this case . 

[0 044] At this time, the administrative address V2 and the private address L2 are 
matched for the administrative address VI and the private address LI in the 
address translation 220 in the management protocol proxy 6 0b, respectively. That 
is, the administrative address VI is assigned to the monitored device a5 0a, and 
the administrative address V2 is statically assigned to the monitored device 
b5 0b, respectively. Thereby, as the management information 24 0 in a monitoring 
instrument, as a device in which the monitored device a50a has the address VI, 
the monitored device b50b is matched as a device with the address V2 , 
respectively, and network management is performed. 

[0045] Also as opposed to the device which the global address is not assigned, 
i.e., drawing 11 does not connect with the exterior in a private network, When 
assigning and carrying out network management of the administrative address, it 
is an example using an address virtual about the device to which uses a global 
address for an administrative address and the global address is not assigned 
about the device to which the global address is assigned. 

[0046] The monitored device a50a has LI as the private address 210a. As the 
address translation 23 0 in NAT2 0b, the global address Gl and the private address 
LI are matched, and the address Gl is statically assigned to monitored device a 
50a as a global address. In carrying out direct communication to the monitored 
device a5 0a from the global network 10 or the private network A3 0a, it 
communicates using the global address Gl . 

[0047] The monitored device b50b has L2 as the private address 210b. However, as 
the address translation 23 0 in NAT2 0b, The global address corresponding to the 
private address L2 is not defined, and, for this reason, direct communication can 
be carried out to the monitored device b5 0b from neither the global network 10 
nor the private network A3 0a. However, the monitoring instrument 4 0 can exchange 
the information according to a management protocol in the monitored device 5 0b 
through a management protocol proxy even in this case. 
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[0048] At this time, the administrative address V2 and the private address L2 are 
matched for the administrative address Gl and the private address LI in the 
address translation 22 0 in the management protocol proxy 60b, respectively. That 
is, the administrative address Gl is assigned to the monitored device a50a, and 
the administrative address V2 is statically assigned to the monitored device 
b5 0b, respectively. Thereby, as the management information 240 in a monitoring 
instrument, as a device in which the monitored device a50a has the address Gl, 
the monitored device b5 0b is matched as a device with the address V2 , 
respectively, and network management is performed. 

[0049] Then, the composition of a management protocol proxy is explained using 
drawing 12 and drawing 13 . Drawing 12 is the composition of the management 
protocol proxy of a supervising side . 

[0050] The management protocol proxy 60b of a supervising side, The communications 
department 61 between proxies which processes establishment of the communication 
path 70 between proxies between the management protocol proxies 60a by the side 
of surveillance, and transmission and reception of management protocol proxy 
data, The proxy data assembly decomposition part 62 which processes the 
disassembly and assembly of management protocol proxy data, The address 
translation treating part 63 which carries out address translation of the address 
information in PDU of a management protocol, It becomes the ASN.1MIB definition 
statement 64 and the address translation definition 65 used as the input to an 
address translation treating part from the SNMP message transmission and 
reception section 66 which transmits and receives an SNMP message between 
monitored devices . 

[0 051] If the message of the management protocol which the monitoring instrument 
4 0 published is changed into management protocol proxy data by the management 
protocol proxy 60a by the side of surveillance and is transmitted to the 
management protocol proxy of a supervising side, First, the communications 
department 61 between proxies receives the transmitted management protocol proxy 
data, and hands the proxy data assembly decomposition part 62. The proxy data 
assembly decomposition part 62 disassembles the received management protocol 
proxy data, and passes it address translation treating part 63. According to the 
ASN.1MIB definition statement 64 and the address translation definition 65, the 
address translation treating part 63, Address translation of the address 
information in the transmitting agency address information of the passed 
management protocol proxy data, transmission destination address information, and 
also PDU of a management protocol is carried out, and a conversion result is 
passed to the proxy data disassembly-and- assembly part 62. Out of proxy data, the 
proxy data assembly decomposition part 62 takes out PDU of transmission 
destination information, transmission source information, and a management 
protocol, and passes it to the SNMP message transmission and reception section 
66. The SNMP message transmission and reception section 66 transmits PDU of a 
management protocol to the monitored device 50 specified as the transmission 
destination. That is, an SNMP message is transmitted. The monitored device 5 0 
returns the response corresponding to the transmitted SNMP message to the SNMP 
message transmission and reception section 66. The SNMP message transmission and 
reception section 6 6 passes the SNMP message of a response which received, and 
the information of the transmitting origin and a transmission destination to the 
proxy data assembly decomposition part 62. Furthermore, as for a proxy data 
assembly decomposition part, transmission destination and transmitting origin 
passes PDU of the management protocol which is a response to an address 
translation treating part. According to the ASN.1MIB definition statement 64 and 
the address translation definition 65, the address translation treating part 63, 
Address translation of the address information in the transmitting agency address 
information of the passed management protocol proxy data, transmission 
destination address information, and also PDU of a management protocol is carried 
out, and a conversion result is passed to the proxy data disassembly-and-assembly 
part 62. Furthermore, as for the proxy data disassembly-and-assembly part 62, 
transmission destination and transmitting origin assembles PDU of a management 
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protocol as management protocol proxy data, and it passes it to the 
communications department 61 between proxies. The communications department 61 
between proxies transmits management protocol proxy data to the management 
protocol proxy 6 0a by the side of surveillance, and the management protocol proxy 
6 0a by the side of surveillance returns PDU of a management protocol to the 
monitoring instrument 40. 

[0052] The place whose ASN.1MIB definition statement 64 is a standard describing 
method of the MIB object indicated to RFC1212 (Concise MIB Definitions) etc. 
here, It is the MIB definition statement described by ASN.l (Abstract Syntax 
Notation One= abstract syntax notation. 1). Generally, the MIB definition 
statement by ASN.l is widely exhibited by those who defined the MIB module. In 
this example, in order to change the address included in Variable-bindings of the 
Protocol Data Unit of a management protocol using the information acquired by 
analyzing the MIB definition statement by ASN.l, special definition statement 
becomes unnecessary and composition becomes easier. 

[0053] Drawing 13 is the composition of the management protocol proxy by the side 
of surveillance. The SNMP message transmission and reception section 66 in which 
the management protocol proxy 60a by the side of surveillance transmits and 
receives an SNMP message among the SNMP surveillance managers 41 on the 
monitoring instrument 40, It consists of the communications department 61 between 
proxies which processes establishment of the communication path 7 0 between 
proxies between the proxy data assembly decomposition part 62 which processes the 
disassembly and assembly of management protocol proxy data, and the management 
protocol proxy 60b of a supervising side, and transmission and reception of 
management protocol proxy data. If the SNMP message which the SNMP surveillance 
manager 41 on the monitoring instrument 4 0 published is passed to the management 
protocol proxy 60a by the side of surveillance, the SNMP message transmission and 
reception section 66 will receive an SNMP message, and will pass it to the proxy 
data assembly decomposition part 62. From the passed SNMP message, and the 
transmission destination and transmission source information, the proxy data 
assembly decomposition part 62 assembles management protocol proxy data, and 
passes it to the communications department 61 between proxies. The communications 
department 61 between proxies transmits the passed management protocol proxy data 
to the management protocol proxy 60b of a supervising side. Furthermore, the 
communications department 61 between proxies receives the management protocol 
proxy data of a response returned from the management protocol proxy 60b of a 
managing side, and hands the proxy data assembly decomposition part 62. As for 
the proxy data assembly decomposition part 62, a transmitting agency takes out a 
transmission destination and an SNMP message from management protocol proxy data, 
and it passes them to the SNMP message transmission and reception section 66 . An 
SNMP message transmission and reception section returns an SNMP message to the 
SNMP surveillance manager 41 on the monitoring instrument 4 0 according to the 
passed information. 

[0054] Drawing 14 is an example in case it is an example of the management 
protocol proxy data transmitted and received on the communication path 70 between 
proxies between the management protocol proxy 60a by the side of management, and 
the management protocol proxy 60b of a managing side and a management protocol is 
SNMP. In this case, as for management protocol proxy data, the transmitting 
origin of an SNMP message is a transmission destination of an SNMP message, and 
data which consists of SNMP PDU. 

[0055] Drawing 2 is a figure of the packet of the usual SNMP message. The packet 
shows only the portion of the higher rank from IP layer which is a network layer. 
In transmitting-on IP layer level origin, in the usual SNMP packet, transmission 
destination information is [ transmitting origin of the SNMP message itself ] a 
transmission destination as it is. 

[0056] Drawing 3 is a figure of the packet of management protocol proxy data in 
case a management protocol is SNMP. The packet shows only the portion of the 
higher rank from IP layer which is a network layer. In the packet of management 
protocol proxy data, The transmission destination of transmitting-on IP layer 
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level origin is one of the management protocol proxies which exist in the both 
ends of the communication path 70 between proxies, and, as for the transmitting 
origin of an SNMP message, the data of a transmission destination is contained in 
a packet as management protocol proxy data equivalent to the application layer. 
Therefore, the virtual address used for address translation is not used as the 
transmission destination or transmission source address of a actual communication 
packet. For this reason, even if it uses the virtual address which is not 
assigned from organizations, such as NIC, to the self -organization, it does not 
interfere with communication by IP layer, i.e., a network layer level, at all. 

[0057] Thus, by the SNMP message transmitting origin on management protocol proxy 
data carrying out address translation of the transmission destination address, 
The virtual address which is not a formal global address can be used for an 
administrative address, even a device without a global address can include, and 
network management of the private network can be carried out. 

[0058] The proxy data assembly decomposition part 62 is explained using drawing 
15, drawing 16, drawing 17, and drawing 18. Drawing 15 is the composition of the 
proxy data assembly decomposition part 62 . 

[0059] The proxy data assembly decomposition part 62 consists of the partner proxy 
definition 6 9 which defined matching with the assembly decomposition treatment 
part 68 which performs assembly decomposition treatment, and the transmission 
destination address of an SNMP message and the partner proxy which should 
transmit the SNMP message. 

[0060] Drawing 16 is an example of a definition of a partner proxy definition. The 
definition line 311 is a definition line showing an address transmitting the SNMP 
message whose 1st octet of a transmission destination address is 100 to the 
management protocol proxy of 200.10.20.30. 

[0061] The 1st octet of a transmission destination address of the definition line 

312 is a definition line showing an address transmitting the SNMP message 101 and 
whose 2nd octet are 10 to the management protocol proxy of 200.10.20.30. 

[0062] The 1st octet of a transmission destination address of the definition line 

313 is a definition line to which, as for the SNMP message 20 and whose 3rd octet 
110 and the 2nd octet are 80, an address means transmitting to the management 
protocol proxy of 230.51.62.72. 

[0063] The definition line 314 is a definition line showing an address 
transmitting the SNMP message whose transmission destination address is 
12 0.60.11.8 to the management protocol proxy of 230.51.62.72. A transmission 
destination address is expressed using an administrative address at this time. 

[0 064] Drawing 17 is a flow chart of proxy data assembly processing. An SNMP 
message is received from an SNMP message transmission and reception section at 
Step 151. A transmission source address and a transmission destination address 
are taken out from the IP header part of an SNMP message at Step 152. SNMP PDU is 
taken out from an SNMP message at Step 153 . The transmission source address and 
transmission destination address which were taken out at Step 154, and SNMP PDU 
are stored in management protocol proxy data. The partner proxy address matched 
with the transmission destination address which Step 155 was partner proxy 
defining and was taken out from the IP header part of the SNMP message is 
searched, and the partner proxy address is determined as the transmission 
destination of protocol proxy data. A proxy data assembly decomposition part 
assembles management protocol proxy data as mentioned above. 

[0 065] Drawing 18 is a flow chart of proxy data decomposition treatment. 
Management protocol proxy data and the address of the management protocol proxy 
which is the partner who transmitted the management protocol proxy data are 
received from the communications department between proxies at Step 161. A 
transmission source address, a transmission destination address, and SNMP PDU are 
taken out from management protocol proxy data at Step 162 . The transmission 
source address and transmission destination address which were taken out at Step 
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163 are stored in the IP header part of an SNMP message. SNMP PDU taken out at 
Step 164 is stored in an SNMP message. A proxy data assembly decomposition part 
disassembles management protocol proxy data as mentioned above. 

[0066] Drawing 19 is a figure showing the composition of the address translation 
treating part 63 . The address translation treating part 63 consists of the SNMP 
message transmitting former transmission destination address converter 85 which 
changes the address of a transmission destination, and the PDU address conversion 
section 8 0 which changes the address information contained in SNMPPDU the 
transmitting origin of an SNMP message. The PDU analysis converter 81 in which 
the PDU address conversion section 80 furthermore processes the analysis and 
address translation of PDU, The object identifier address conversion section 82 
which processes conversion of the address included as an object identifier among 
the address information contained in PDU, It consists of the trap transmission 
source address converter 84 which processes conversion of the address included as 
a trap transmission source address among the MIB value address conversion section 
83 which processes conversion of the address included as an MIB value among the 
address information contained in PDU, and the address information contained in 
PDU. 

[0067} From the proxy data assembly decomposition part 62, if management protocol 
proxy data is passed to the address translation treating part 63, In the SNMP 
message transmitting origin in management protocol proxy data, the SNMP message 
transmitting former transmission destination address converter 85 performs 
address translation about a transmission destination according to the address 
translation definition 65 first. Next, the SNMP message transmitting former 
transmission destination address converter 85 passes management protocol proxy 
data to the PDU analysis converter 81. The PDU analysis converter 81 analyzes 
about PDU in the passed management protocol proxy data, and extracts the portion 
which needs address translation from the inside. First, a trap transmission 
source address portion is extracted from PDU, the trap transmission source 
address converter 84 is passed, and the trap transmission source address 
converter 84 carries out address translation of the trap transmission source 
address according to the address translation definition 65, and returns it to the 
PDU analysis converter 81. The PDU analysis converter 81 is an address after the 
conversion received from the trap transmission source address converter 84, and 
replaces the trap transmission source address portion of PDU. The classification 
of data extracts the MIB value which is a thing showing an IP address from PDU, 
the MIB value address conversion section 83 is passed, and the MIB value address 
conversion section 83 carries out address translation of the MIB value according 
to the address translation definition 65, and returns it to the PDU analysis 
converter 81. The PDU analysis converter 81 is an address after the conversion 
received from the MIB value address conversion section 83, and replaces the MIB 
value portion of PDU. Extract the object identifier of MIB from PDU, pass the 
object identifier address change part 82, and the object identifier address 
conversion section 82, Address translation of the IP address included in an 
object identifier according to ASN.1MIB definition statement and the address 
translation definition 65 is carried out, and it returns to the PDU analysis 
converter 81. The PDU analysis converter 81 is an address after the conversion 
received from the object identifier address conversion section 82, and replaces 
the object identifier portion of MIB of PDU. Finally a PDU analysis converter 
returns the management protocol proxy data having contained PDU after performing 
address translation to the proxy data assembly decomposition part 62 . The address 
translation treating part can perform address translation about the data of a 
management protocol as mentioned above. 

[ 0068] Drawing 2 0 is the composition of the object identifier address conversion 
section 82. The ASN.1MIB definition statement decoding section 88 in which the 
object identifier address conversion section 82 decodes the ASN.1MIB definition 
statement 65, The object identifier extraction part 8 9 for conversion which 
extracts the object which needs to change an object identifier based on the 
definition content of decoded MIB, The object identifier passed from the PDU 
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analysis converter 81 is compared with the object identifier which the object 
identifier extraction part 89 for conversion extracted, It consists of the 
address translation execution part 87 which carries out address translation of 
the object identifier based on the object identifier comparing element 86 which 
judges whether the passed object identifier needs to be changed, and the defining 
information and the address translation definition 65 which the object identifier 
extraction part for conversion extracted. 

[0069] First, the information on the MIB definition obtained as a result of the 
ASN.1MIB definition statement decoding section's 88 reading, decoding and 
decoding the ASN.1MIB definition statement 65 is passed to the object identifier 
extraction part 89 for conversion. The object identifier extraction part 8 9 for 
conversion extracts the MIB object which may include an IP address in an object 
identifier out of the passed MIB definition, The INDEX information which is the 
defining information of the MIB object which corresponds the list of the object 
identifiers of an applicable MIB object to the object identifier comparing 
element 86 is passed to the address translation execution part 87, respectively. 
Here with the MIB object which may include an IP address in an object identifier. 
It is an MIB [ of as / whose one or more of the MIB objects in an MIB table used 
as INDEX of a table it is an MIB object showing an MIB table, and are IP 
addresses ] object. Such an object, When acquiring the instance which is a value 
of an MIB object at a GET request etc., add INDEX which is an instance identifier 
after the object identifier of an MIB object, and specify as one object 
identifier, but. Since an IP address is used for INDEX at this time, an IP 
address may be included in an object identifier. As INDEX information passed to 
the address translation execution part 87, When two or more MIB objects are 
matched as INDEX of an MIB table, in order to change only the portion of the IP 
address in it, the information which arranged in order SYNTAX which is the 
classification of the MIB object used as INDEX is passed. For example, in the 
case of an MIB table which takes one integral MIB object and IP address, an 
instance identifier turns into an identifier with a total of five subidentif iers 
of four parts of one and the IP address of an integral part as INDEX. In address 
translation, since it is necessary to interpret the 2nd to the 5th subidentif ier 
of these as an IP address, and to change it, INDEX needs to pass the information 
that it is a group of one integer and one IP address to the address translation 
execution part 87. 

[0070] Now, if the object identifier in PDU is passed to the object identifier 
address conversion section 82 from the PDU analysis converter 81, the object 
identifier comparing element 8 6 will receive an object identifier first here. The 
object identifier to which the object identifier comparing element 8 6 was passed 
from the PDU analysis converter 81, The object identifier list for [ which the 
object identifier extraction part 89 for conversion extracted ] conversion is 
compared, If the object identifier passed from the PDU analysis converter 81 is 
contained in the object identifier list for conversion, an object identifier will 
be passed to the address translation execution part 87 from the PDU analysis 
converter 81. If the object identifier passed from the PDU analysis converter 81 
is not contained in the object identifier list for conversion, the object 
identifier passed from the PDU analysis converter 81 will be returned to the PDU 
analysis converter 81 as it is, without changing anything. 

[0 071] Next, the address translation execution part 87 about the passed object 
identifier. The position of the IP address which appears in an object identifier 
based on the INDEX information first passed from the object extraction part 8 9 
for conversion, That is, transformation positions are pinpointed, then, address 
translation is performed based on the address translation definition 65, and the 
object identifier after conversion is returned to the PDU analysis converter 81. 

[0072] Address translation of the IP address by which an object identifier address 
conversion section is contained as mentioned above in the object identifier of 
MIB can be carried out . 

[0073] Processing of a PDU analysis converter is explained using the flow chart of 
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drawing 21. The data which expresses the PDU classification from PDU with Step 
111 is extracted. The direction of address translation is determined from PDU 
classification at Step 112. The direction of address translation means whether to 
change into an administrative address from a real address whether the address in 
PDU is changed into a real address from an administrative address. PDU 
transmitted to a supervising side changes an administrative address into a real 
address from the surveillance side. PDU transmitted to the surveillance side 
changes a real address into an administrative address from a supervising side. 
Since it was decided for every PDU classification, whether it is transmitted from 
a supervising side to the surveillance side whether it is transmitted to a 
supervising side from the surveillance side can determine the direction of 
address translation from PDU classification according to the table of drawing 22 . 
It is judged at Step 113 whether the classification of PDU is an SNMP trap. In 
the case of an SNMP trap, it progresses to Step 114. When it is not an SNMP trap, 
it progresses to Step 117. At Step 114, a trap transmission source address is 
extracted from PDU. At Step 115, the information on the direction of address 
translation it was determined at a lap transmission source address and Step 112 
that extracted at Step 114 is passed to a trap transmission source address 
converter, and the trap transmission source address after conversion is received. 
At Step 116, the trap transmission source address of PDU is transposed to the 
trap transmission source address after the conversion received at Step 115. At 
Step 117, it is judged whether variableBindingList exists in PDU. When 
variableBindingList exists, it progresses to Step 118. When variableBindingList 
does not exist, processing of a PDU analysis converter is ended. At Step 118, one 
variableBind which has not been processed yet is extracted from 

variableBindingList. At Step 119, an object identifier and a value are extracted 
from variableBind extracted at Step 118. At Step 120, the MIB value extracted at 
Step 119 and the information on the conversion direction determined at Step 112 
are passed to an MIB value address conversion section, and the MIB value after 
conversion is received. At Step 121, the object identifier extracted at Step 119 
and the information on the conversion direction determined at Step 112 are passed 
to an object identifier address conversion section, and the object identifier 
after conversion is received. At Step 122, the MIB value of variableBind is 
transposed to the MIB value after the conversion received at Step 12 0 at the 
object identifier after the conversion which received the object identifier of 
variableBind of PDU at Step 121, respectively. It is judged whether at Step 123, 
unsettled variableBinding still remains. If it remains, it will progress to Step 
118. If it does not remain, processing of a PDU analysis converter will be ended. 
The address information in PDU is convertible as mentioned above. Processing of 
the object identifier extraction part for conversion is explained using the flow 
chart of drawing 23 . 

[0074] One object identifier defined as MIB definition statement at Step 131 is 
taken out. The object identifier taken out in Step 131 at Step 132 judges whether 
it is an identifier showing an MIB table. In the case of the identifier showing 
an MIB table, it progresses to Step 133. When it is not an identifier showing a 
Mlb table, it progresses to Step 136. At Step 133, SYNTAX of the MIB object in a 
table specified as INDEX of an object identifier is extracted. It is also judged 
whether the number of what is SYNTAX (s) to which SYNTAX of the MIB object in a 
table extracted in Step 133 expresses an IP address with Step 134 is one. In a 
certain case, it progresses to Step 135. When there is nothing, it progresses to 
Step 136. It is judged that the object identifier taken out in Step 131 at Step 
135 is an object identifier for conversion. 

[0075] It is judged that the object identifier taken out in Step 131 at Step 136 
is not an object identifier for conversion. At Step 13 7, it is judged whether an 
unsettled object identifier is still in MIB definition statement. In a certain 
case, it still progresses to Step 131. When there is nothing, it progresses to 
Step 138. At Step 138, all the object identifiers judged to be the candidates for 
conversion are notified to an object identifier comparing element. At Step 13 9, 
all the INDEX information on an object identifier judged to be the candidates for 
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conversion is notified to an address translation execution part. Processing of 
the object identifier extraction part for conversion is realizable as mentioned 
above . 

[0076] Drawing 24 is an example of a definition of the address translation 
definition 65. The definition line 301 is an example of a definition in the case 
of changing only the 1st octet of an IP address. In this case, that from which 
all the real addresses whose 1st octet is 10 changed the 1st octet into 100 
serves as an administrative address. For example, when the address 100.1.2.3 is 
in the data of a management protocol transmitted from the monitoring instrument 
40, by address translation, the address is changed into 10.1.2.3 and relayed to 
the monitored device 50. On the contrary, when the address 10.1.2.3 is during the 
response from the monitored device 50, by address translation, the address is 
changed into 100.1.2.3 and relayed to the monitoring instrument 40. The 
definition line 3 02 is an example of a definition in the case of changing the 1st 
octet and the 2nd octet of an IP address. In this case, the 1st octet is 172 and 
what all the real addresses whose 2nd octet is 16 changed the 1st octet into 101, 
and changed the 2nd octet into 10 serves as an administrative address. For 
example, when the address 101.10.1.2 is in the data of a management protocol 
transmitted from the monitoring instrument 40, by address translation, the 
address is changed into 172.16.1.2 and relayed to the monitored device 50. On the 
contrary, when the address 172.16.1.2 is during the response from the monitored 
device 50, by address translation, the address is changed into 101.10.1.2 and 
relayed to the monitoring instrument 40. The definition line 303 is an example of 
a definition in the case of changing the 1st octet, the 2nd octet, and the 3rd 
octet of an IP address. In this case, the 1st octet is 172, the 2nd octet is 17 
and what all the real addresses whose 3rd octet is 5 0 changed the 1st octet into 
110, changed the 2nd octet into 20, and changed the 3rd octet into 8 0 serves as 
an administrative address. For example, when the address 110.20.80.1 is in the 
data of a management protocol transmitted from the monitoring instrument 40, by 
address translation, the address is changed into 172.17.50.1 and relayed to the 
monitored device 50. On the contrary, when the address 172.17.50.1 is during the 
response from the monitored device 50, by address translation, the address is 
changed into 110.20.80.1 and relayed to the monitoring instrument 40. The 
definition line 3 04 is an example of a definition in the case of changing all the 
octets of the 1st octet to the 4th octet of an IP address. In this case, the real 
address whose address is 192.168.20.5 is changed into the administrative address 
120.60.11.8. For example, when the address 120.60.11.8 is in the data of a 
management protocol transmitted from the monitoring instrument 40, by address 
translation, the address is changed into 192.168.20.5 and relayed to the 
monitored device 50. On the contrary, when the address 192.168.20.5 is during the 
response from the monitored device 50, by address translation, the address is 
changed into 120.60.11.8 and relayed to the monitoring instrument 40. 

[0077] Drawing 25 is an example of composition of another virtual network 
management system. In this case, although the management protocol proxy 6 0a by 
the side of the monitoring instrument 4 0 and a monitoring instrument exists on 
the global network 10, it can perform virtual network management using an 
administrative address as well as the case of the composition of drawing 1 in any 
way . 

[0078] Drawing 26 and drawing 27 are the composition of the management protocol 
proxy in another example, and are an example in the case of carrying out address 
translation by the management protocol proxy by the side of surveillance. 

[0079] Address translation can be performed by the same method as the case where 
address translation is carried out by the management protocol proxy of the 
supervising side shown in drawing 12 and drawing 13 also in this case. However, 
when carrying out address translation in the management protocol proxy by the 
side of surveillance, The address translation definition defined as the 
management protocol proxy by the side of surveillance, A definition is 
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independently given for every private network of a supervising side, for example, 
the address translation definition 65b is defined for private network B of a 
supervising side, and the address translation definition 65c is defined for 
private network C of a supervising side, respectively. Even when the private 
address of a monitoring instrument is competing in two or more supervising side 
private networks like the composition of drawing 9 by this, it can be made to 
carry out address translation correctly. 

[ 0 0 8 0 ] Drawing 28 and drawing 29 are the composition of the virtual network 
managerial system in example another again, and the composition of the management 
protocol proxy of a managing side, and are the composition that it operates on 
the same device as NAT which the management protocol proxy of the managing side 
semi- **(ed) to RFC1631. 

[0081] This example the management protocol proxy 60a by the side of the 
monitoring instrument 4 0 and surveillance, It is the composition that it operates 
on the same device as NAT20 which existed on the global network 10, and performed 
address translation by the management protocol proxy of the supervising side, and 
the management protocol proxy of the managing side semi- ** (ed) to RFC1631. 

[0082] Drawing 29 is the composition of the management protocol proxy 60b of the 
supervising side which operates on the same device as NAT20 which does not have 
an address conversion function of the management protocol which semi- ** (ed) in 
RFC1631. When the communications department 61 between proxies communicates with 
the management protocol proxy 60a by the side of surveillance, Communicating via 
the global -network side communications protocol processing part 21 of NAT2 0, and 
when the SNMP message transmission and reception section 66 transmits and 
receives the monitored device 50 and data, It is the difference from the 
composition of drawing 12 to communicate via the private network side 
communications protocol processing part 23 of NAT20. About the packet which is 
going to pass through the device of NAT2 0 from the global -network side to the 
private network side, as a motion which semi- ** (ed) to RFC1631 of NAT20. Catch 
the packet through which the global -network side communications protocol 
processing part 21 tends to pass first, and the RFC1631 semi- ** address 
translation treating part 22 is passed, After the RFC1631 semi- ** address 
translation treating part 22 carries out address translation, a packet is passed 
to the private network side communications protocol processing part 23, and it is 
sent out by the private network side communications protocol processing part 23 
to the private network side. 

[0 083] About the packet which is going to pass from the private network side to 
the global -network side, on the contrary. Catch the packet through which the 
private network side communications protocol processing part 23 tends to pass 
first, and the RFC1631 semi- ** address translation treating part 22 is passed, 
After the RFC1631 semi- ** address translation treating part 22 carries out 
address translation, a packet is passed to the global -network side communications 
protocol processing part 21, and it is sent out by the global -network side 
communications protocol processing part 21 to the global -network side. 

[0 084] However, the communication by the communications department 61 between 
proxies is communication which carries out the address by the side of the global 
network of the device with which NAT and the management protocol proxy of a 
supervising side operate transmission destination or transmitting origin, and is 
not the communication which is going to pass through NAT20. For this reason, data 
is passed to the communications department 61 between proxies as it is from the 
global-network side communication processing part 21, without the RFC1631 semi- 
** address translation treating part 22 passing. 

[0085] It is the communication which carries out the address by the side of the 
private network of the device with which NAT and the management protocol proxy of 
a supervising side operate transmission destination or transmitting origin also 
with communication by the SNMP message transmission and reception section 66, and 
is not the communication which is going to pass through NAT 20 . For this reason, 
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data is passed to the SNMP message transmission and reception section 66 as it is 
from the private network side communication processing part 23, without the 
RFC1631 semi- ** address translation treating part 22 passing. 

[0086] It is possible to realize operation, now virtual network management on the 
same device as NAT2 0 from the above thing using the management protocol proxy of 
the same composition as the management protocol proxy of the supervising side 
shown in drawing 12 . 

[0087] Processing of the management protocol proxy is realizable by a program as 
the flow chart showed it, as already stated. 

[0088] as mentioned above, with the function in which NAT performs address 
translation of IP layer, although NAT explained as what performs address 
translation of IP layer (NAT changes the address of the PDU portion of a 
management protocol -- a functional owner has not been carried out.) . When it has 
the function to change the address of the PDU portion of a management protocol, 
address translation of the PDU portion of a management protocol can be performed 
using NAT and a management protocol proxy server selectively. 

[0089] 

[Effect of the Invention] As explained above, data communications can be performed 
between the proxies of a management protocol, and the data communications by a 
management protocol can be performed between nodes without a global address. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 1] It is a figure showing the basic constitution of a network system. 

[Drawing 2] It is a figure showing the composition of the packet of an SNMP 
message. 

[Drawing 3] It is a figure showing the composition of the packet of management 
protocol proxy data . 

[Drawing 4] It is a figure for explaining the function of NAT. 
[Drawing 5] It is a figure showing the composition of the packet of an SNMP 
message . 

[Drawing 6] It is a figure showing the composition of the packet of an SNMP 
message . 

[Drawing 7] It is a figure showing the example of 1 application in a virtual 
network managerial system. 

[Drawing 8] It is a figure showing the example of 1 application in a virtual 
network managerial system. 

[Drawing 9] It is a figure showing the example of 1 application in a virtual 
network managerial system. 

[Drawing 10] It is a figure showing the example of 1 application in a virtual 
network managerial system. 

[Drawing 11] It is a figure showing the example of 1 application in a virtual 
network managerial system. 

[Drawing 12] It is a figure showing the composition of the management protocol 
proxy of a supervising side. 

[Drawing 13] It is a figure showing the composition of the management protocol 
proxy by the side of surveillance. 

[Drawing 14] It is a figure showing an example of management protocol proxy data. 

[Drawing 15] It is a figure showing the composition of a proxy data 
disassembly-and-assembly part. 

[Drawing 16] It is a figure showing the example of a definition of a partner proxy 
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definition . 

[Drawing 17] It is a figure showing the flow chart of proxy data assembly- 
processing . 

[Drawing 18] It is a figure showing the flow chart of proxy data decomposition 
treatment . 

[Drawing 19] It is a figure showing the composition of an address translation 
treating part. 

[Drawing 20] It is a figure showing the composition of an object identifier 
address conversion section. 

[Drawing 21] It is a figure showing the flow chart of processing of a PDU analysis 
converter. 

[Drawing 22] It is a figure showing the relation between the transmit direction of 
PDU classification and PDU, and the conversion direction of address translation. 

[Drawing 23] It is a figure showing the flow chart of processing of the object 
identifier extraction part for conversion. 

[Drawing 24] It is a figure showing the example of a definition of an address 
translation definition. 

[Drawing 25] It is a figure showing the example of composition of a virtual 
network managerial system. 

[Drawing 26] It is a figure showing the composition of a management protocol 
proxy. 

[Drawing 27] It is a figure showing the composition of a management protocol 
proxy. 

[Drawing 28] It is a figure showing the composition of a virtual network 
managerial system. 

[Drawing 29] It is a figure showing the composition of the management protocol 
proxy of a managing side. 
[Description of Notations] 

10 [ - - A monitoring instrument, 50 / -- A monitored device, 60 / A management 
protocol proxy, 70 / -- Communication path between proxies ] Global network, 
2 0 -- NAT, 3 0 -- A private network, 4 0 
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